RE: Usage of CRL Issuing Distribution Point

[Santosh Chokhani <chokhani@xxxxxxxxxxxx>]

In addition, the relying party must validate the contents of the Issuing
DP (which is within the signed envelope of the CRL) against the contents
of the CDP (which is in the signed envelop of the certificate).  The
specific validation rules (once again at the risk of being redundant)
are listed in the Annex M of the X.509 9/98 PDAM.

> -----Original Message-----
> From:	Stephen Kent [SMTP:kent@bbn.com]
> Sent:	Friday, February 19, 1999 9:56 AM
> To:	Trevor Freeman
> Cc:	'ietf-pkix@imc.org'
> Subject:	RE: Usage of CRL Issuing Distribution Point
> 
> Trevor,
> 
> Yes, this message thread certainly does seem to have become confused.
> Hopefully we now agree that inclusion of a CDP extension in a cert
> allows a
> relying party to determine whether it has the right CRL for the cert
> in
> question, subject to the usual CRL validation processes.  Note that,
> in
> this case, the relying party does not care whether there are multiple
> CRLs
> or not, since the the CDP extension provided the necessary pointer.
> 
> Steve